[System] Fixed issue when Authorization header is missing

flaschengeist/decorator.py

@@ -20,7 +20,11 @@ def login_required(permission=None):
     def wrap(func):
         @wraps(func)
         def wrapped_f(*args, **kwargs):
+            try:
                 token = list(filter(None, request.headers.get("Authorization").split(" ")))[-1]
+            except AttributeError:
+                raise Unauthorized
+
             session = sessionController.validate_token(token, request.user_agent, permission)
             if session:
                 kwargs["current_session"] = session